We would like to disable TRACE/TRACK HTTP method on the SCA webserver domain. Currently we get error running the command below:
$ curl -v -X TRACE http://xxxxx.domain.com:8080/stat/
* About to connect() to xxxx.domain.com port 8080 (#0)
* Trying xxx.xxxx.xxx...
* Connected to xxxxx.domain.com (xxxxx) port 8080 (#0)
> TRACE /stat/ HTTP/1.1
> User-Agent: curl/7.29.0
> Host: xxxxxx.domain.com:8080
> Accept: */*
>
< HTTP/1.1 500 Internal Server Error
< Connection: keep-alive
< Set-Cookie: JSESSIONID=oHJVk7zH8DzZZmtZQsnA-BiZ.omaedcpsa011; path=/stat; HttpOnly
< Content-Type: text/html;charset=UTF-8
< Content-Length: 80
< Date: Mon, 05 Aug 2019 19:39:13 GMT
<
* Connection #0 to host xxxxx.domain.com left intact
<html><head><title>Error</title></head><body>Internal Server Error</body></html>